Revision: 1453 http://trac.macosforge.org/projects/calendarserver/changeset/1453 Author: cdaboo@apple.com Date: 2007-04-05 13:54:34 -0700 (Thu, 05 Apr 2007) Log Message: ----------- Make sure free-busy report can be run with only CALDAV:read-free-busy privilege on the calendar collection. Modified Paths: -------------- CalendarServer/trunk/twistedcaldav/method/__init__.py Added Paths: ----------- CalendarServer/trunk/twistedcaldav/method/report.py Modified: CalendarServer/trunk/twistedcaldav/method/__init__.py =================================================================== --- CalendarServer/trunk/twistedcaldav/method/__init__.py 2007-04-05 18:21:28 UTC (rev 1452) +++ CalendarServer/trunk/twistedcaldav/method/__init__.py 2007-04-05 20:54:34 UTC (rev 1453) @@ -29,6 +29,7 @@ "mkcalendar", "mkcol", "put", + "report", "report_calquery", "report_freebusy", "report_multiget", Added: CalendarServer/trunk/twistedcaldav/method/report.py =================================================================== --- CalendarServer/trunk/twistedcaldav/method/report.py (rev 0) +++ CalendarServer/trunk/twistedcaldav/method/report.py 2007-04-05 20:54:34 UTC (rev 1453) @@ -0,0 +1,133 @@ +# -*- test-case-name: twisted.web2.dav.test.test_report -*- +## +# Copyright (c) 2005 Apple Computer, Inc. All rights reserved. +# +# Permission is hereby granted, free of charge, to any person obtaining a copy +# of this software and associated documentation files (the "Software"), to deal +# in the Software without restriction, including without limitation the rights +# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +# copies of the Software, and to permit persons to whom the Software is +# furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included in all +# copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +# SOFTWARE. +# +# DRI: Wilfredo Sanchez, wsanchez@apple.com +## + +""" +WebDAV REPORT method +""" + +__all__ = ["http_REPORT"] + +import string + +from twisted.python import log +from twisted.internet.defer import deferredGenerator, waitForDeferred +from twisted.web2 import responsecode +from twisted.web2.http import HTTPError, StatusResponse +from twisted.web2.dav import davxml +from twisted.web2.dav.element.parser import lookupElement +from twisted.web2.dav.http import ErrorResponse +from twisted.web2.dav.util import davXMLFromStream + +from twistedcaldav import caldavxml + +max_number_of_matches = 500 + +class NumberOfMatchesWithinLimits(Exception): + pass + +def http_REPORT(self, request): + """ + Respond to a REPORT request. (RFC 3253, section 3.6) + """ + if not self.fp.exists(): + log.err("File not found: %s" % (self.fp.path,)) + raise HTTPError(responsecode.NOT_FOUND) + + # + # Read request body + # + try: + doc = waitForDeferred(davXMLFromStream(request.stream)) + yield doc + doc = doc.getResult() + except ValueError, e: + log.err("Error while handling REPORT body: %s" % (e,)) + raise HTTPError(StatusResponse(responsecode.BAD_REQUEST, str(e))) + + if doc is None: + raise HTTPError(StatusResponse( + responsecode.BAD_REQUEST, + "REPORT request body may not be empty" + )) + + # + # Parse request + # + namespace = doc.root_element.namespace + name = doc.root_element.name + + def to_method(s): + ok = string.ascii_letters + string.digits + "_" + out = [] + for c in s: + if c in ok: + out.append(c) + else: + out.append("_") + return "report_" + "".join(out) + + if namespace: + method_name = to_method(namespace + "_" + name) + else: + method_name = to_method(name) + + try: + method = getattr(self, method_name) + + # Also double-check via supported-reports property + reports = self.supportedReports() + test = lookupElement((namespace, name)) + if not test: + raise AttributeError() + test = davxml.Report(test()) + if test not in reports: + raise AttributeError() + except AttributeError: + # + # Requested report is not supported. + # + log.err("Unsupported REPORT {%s}%s for resource %s (no method %s)" + % (namespace, name, self, method_name)) + + raise HTTPError(ErrorResponse( + responsecode.FORBIDDEN, + davxml.SupportedReport() + )) + + # + # Check authentication and access controls + # + privileges = (davxml.Read(),) + if method_name == "report_urn_ietf_params_xml_ns_caldav_free_busy_query": + privileges = (caldavxml.ReadFreeBusy(),) + x = waitForDeferred(self.authorize(request, privileges)) + yield x + x.getResult() + + d = waitForDeferred(method(request, doc.root_element)) + yield d + yield d.getResult() + +http_REPORT = deferredGenerator(http_REPORT)